platform-ci/examples/source-tools.ci.yaml

schema: 1

# A repository whose only build is the legacy source checks that need more than the Node image has: workflow lint, orb shell lint,
# make/Bats, Kustomize render and Authentik blueprint lint. The `source-tools` tool runs the platform's receipted helpers (source_tools/receipt.json)
# unchanged, in the repository root, on the qualified source-tools image. Each command is a subcommand name; only `kustomize-render` and
# `blueprint-lint` take arguments, which are relative directories inside the repository (letters, digits, `.`, `_`, `-`, `/`; no `..`, no
# leading `/`). The directory must be the repository root. A tool is never downloaded: the image has them or the check fails.
# Declare only the checks the repository had; the lightweight `source` tool (examples/source.ci.yaml) stays the choice for tracked-files alone.
components:
  source-tools:
    toolchains:
      source-tools: "1"
    build:
      tool: source-tools
      commands:
        - ["actionlint"]
        - ["shellcheck-orb"]
        - ["make-bats"]
        - ["kustomize-render", "deploy/overlays/prod", "deploy/overlays/staging"]
        - ["blueprint-lint", "blueprints"]